+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: [TUT]How to gain admin access to NetSupport School software (/showthread.php?tid=1874531)
[TUT]How to gain admin access to NetSupport School software - veghead - Oct 31, 2011
How to gain admin access to NetSupport School software
A quick tutorial on gaining Control of your school PC's if they have NetSupport School installed.
Techniques required:
Social Engineering/Distraction
cooperation of a friend or two
Firstly what is Netsupport school?
The software's http://www.netsupportsoftware.com/index.asp gives a good overview.
NetSupport School is essentially Remote Desktop software specifically designed for a classroom scenario. It gives the teacher the ability to monitor individual students or a select group, or the whole class, they can monitor your desktop to see what you are doing, lock the machine so they have your full attention. There is a test suite on there which means they can broadcast questions to your computer and will see your answers submitted through it. there is also an audio monitor (Monitor the entire class in a single view and with the use of the displayed visual indicators see instantly which PCs have live audio activity. Listen to a student’s microphone feed and correct pronunciation, conduct a 2-way chat with a specific student avoiding disruption for the rest of the class.) and IM control (In addition to the ability to prevent Messenger applications running within the classroom, NetSupport School also provides real-time monitoring of specific Messenger applications, presenting the Teacher with a real time view of chat activity and content.)
Essentially with this software installed it's pretty hard to get away with anything. however it only allows for a single Control PC per session. so if the teacher is in control then no one else can take over. (I had a situation once where I was testing the software and monitoring a class from my techie office, the teacher had to come to me to ask me to close my connection as they couldn't teach the class)
In the school I worked in the Control software was installed to a network share on one of the network servers, the network share was restricted to Teacher access and above.
So how can you have some fun with this as a student?
Obviously you need to gain access to the control software before you can even begin to have some fun. The easiest way is to get a copy of the program folder, but how do you do that?
Well as I mention above the way the school I worked in had this set up the program was installed to a network share accessible by anyone with teacher access or above So you would need to find a way to access this network share.
This is where stupid teachers come in handy, what you want is to find a teacher who regularly leaves their computer unattended and not lock the screen whilst logged in. so watch your teachers during lessons, watch their behaviour, if they are not using NetSupport in your lesson are they walking around the classroom? if they do are they leaving the teacher computer unlocked as they walk round? that essentially is your way in, and where a little Social Engineering of sorts comes in to play.
If the teacher locks the computer when they leave their desk to do a walk around, then you need to get them to leave it unlocked so you can access the machine. This is where a trusted friend comes in... you need them to distract the teacher so much that they forget to lock the screen. So you need to create some kind of emergency situation. this could be a fake fight but that would lead to some form of action being taken against those fighting which means it's not an ideal option as you would need some form of compensation for the ones fighting. An excellent option is someone faking an epileptic seizure, it's best if it is someone who actually has epilepsy because it limits any medical action taken. By that I mean If you are a sufferer then it's not out of the realms of possibility for you to have a seizure, where as if you are not then the teacher and school would panic much more and end up calling 999/911 you'd be found out to be faking it pretty quickly unless you're a damn good actor. you only need to find an extreme way of distracting the teacher if they are usually careful and lock the machine when they are away from it.
Anyway find some way to get your teacher away from the PC and distracted long enough for you to go on the machine, and find the folder for the program. Look at the properties of the programs desktop shortcut and then browse the network to the installation folder. you need to copy the entire folder to a USB memory stick, so go up one level in the directory and copy paste the program folder.
Make sure you leave the PC exactly as the teacher left it so they are non the wiser.
If the teacher leaves the PC unlocked while they do a walk about, all the better, because all you have to do is have someone distract them with a question or three about the work they are doing? get the teacher to explain something in detail or whatever just have them kept occupied enough to grab the folder you need.
You don't need to be in class with a teacher to try gain access to a teachers account, do any of your teachers use a PC in the school library? watch them and if they leave the PC to collect some print outs or whatever you can get in and grab the folder there. are any of the classrooms left open during breaks or lunch? get in there and see if a teacher has left themselves logged in.
Once you have that program folder you have the control software :)
It's then just a case of plugging your USB pen into a machine clicking the program file and letting it run. You will be able to choose what classroom of PC's to monitor and you'll have full control if you want it. I don't know if the current version requires a password before the control software is launched but certainly older versions didn't require any.
The Down Side of this
As i said above, the control program only allows one instance to have control at a time, so if a teacher is using it already then you won't be able to, and likewise if you are running it then the teacher will be locked out. this makes it easy for you to be discovered or at least alerts the teacher and therefore the techies they come running to, that someone has access.
if you are running the control then don't do anything stupid with it, you will be caught, I would suggest use the monitoring part rather than taking control, you should be able to get hold of some juicy info you can use to your advantage.
Real world example of what can go wrong for you:
This happened while I was working in a school, I was one of the techies who had to find the kid who was fucking things up...
Basically a kid had managed to get hold of the control software in a similar way to what I describe above but he made a few mistakes and was caught along with three others who he had shared the software with.
His main mistake was sharing the software. He had been using it for months without being detected, because he never took control of the machines except when it was friends who were using it so he could have text convos with them via notepad.
Eventually a couple of kids found out he had this and wanted it, he gained a little respect for having managed to pull the "hack" off and he shared the files with three others.
These others were not so careful and the first time they used the control program they took control of random PC's and deleted work that kids had been doing during the lesson, as well as other malicious shit like controlling the teachers PC and putting up abusive messages on their screen.
What these three Skids failed to realise was that when they took control of a PC it displayed on screen the id of the computer they were using... The teacher came to me and the network manager, told us what was happening and that we needed to do something. Tracking the kids down was easy, they were using school laptops that had been issued for a particular class so we knew exactly what room they were in and what computer they were using, it was a simple case of going down to the room to id the kids on those particular laptops we caught the three red handed literally in the process of deleting more work.
They were dragged up in front of the head of year and the school head, had their computer access revoked indefinitely, were suspended for three weeks due to the amount of work permanently lost due to their actions and once they were back in school were in inclusion for two months. in the course of them being questioned by the head they grassed up the kid they had got the software from, who although he got detentions and computer access revoked his punishment was lighter than the three because he did no damage at all. If he had not shared the folder with them he would have got away with it and never been discovered.
Moral of the story, yeah you can have some fun with it, and get info that can be useful for blackmail or SE'ing other students, but if you talk about the access you have you'll eventually get fucked over. Don't trust anyone, keep your access quiet and to yourself, and don't do any malicious shit with it and you will probably get away with it.
* - Techie - Oct 31, 2011
Nice tutorial. But you should find another way to hack.
* - -Damien- - Oct 31, 2011
I am not school student, so I can't test this. Thanks anyways.
* - veghead - Oct 31, 2011
(Oct 31, 2011 06:01 AM)Techie. Wrote: Nice tutorial. But you should find another way to hack.
Yeah, it's not exactly a hack anyway. but it's a quick and dirty way of being able to monitor a "target" if you're wanting to get some juice on someone in school.
When I was working in that school not all the teachers would use the NetSupport software, quite a few left it alone because they didn't know how to use it, so it was pretty easy for students who had the control program to go undetected. But generally there are too many things that can lead to you getting caught using this way of gaining control, so it would as you say be better to find another way to get that sort of access.
* - #cn - Oct 31, 2011
Why would the school get you to team with the network manager to find who was doing the deleting? Rofl
* - veghead - Oct 31, 2011
(Oct 31, 2011 06:15 AM)cn. Wrote: Why would the school get you to team with the network manager to find who was doing the deleting? Rofl
It's not exactly that they got me to team with them. I was working as a techie there and in the office when the teacher came in. it was my job to chase it up.
* - CPUZ37 - May 2, 2017
The keeping the session open is not a must. If you have access to the boot menu of the bios, then you can run a live cd of linux witch you can explore the teacher computer. (Linux ignore the windows file system permissions). And there you can copy it.
* - Rangers. - May 2, 2017
Nice tutorial thanks for share.
* - Hopsin - May 3, 2017
(May 2, 2017 09:20 AM)Proxifier Wrote: Nice tutorial thanks for share.
I don't know if this still works because its old thread, but If in case you use this (illegal purposes), be careful when you do. You always could get caught...have a nice day buddy!
* - Mr. Robot - May 3, 2017
(May 2, 2017 08:51 AM)CPUZ37 Wrote: The keeping the session open is not a must. If you have access to the boot menu of the bios, then you can run a live cd of linux witch you can explore the teacher computer. (Linux ignore the windows file system permissions). And there you can copy it.
(May 2, 2017 09:20 AM)Proxifier Wrote: Nice tutorial thanks for share.
Yo sup with the gravedig, pming you both now to be a little bit more careful.
RE: Wouldn't Work - lagyserver - Oct 22, 2024
(May 2, 2017 08:51 AM)CPUZ37 Wrote: The keeping the session open is not a must. If you have access to the boot menu of the bios, then you can run a live cd of linux witch you can explore the teacher computer. (Linux ignore the windows file system permissions). And there you can copy it.
Running a live cd or flash drive would 100% of the time activate bitlocker (Which is enabled by standard in most schools). Then ur fucked
RE: [TUT]How to gain admin access to NetSupport School software - 03jk - Oct 23, 2024
Nice tutorial. But you should find another way to hack.